Skip to content
COOEY

FAIL › dossier

Kernel

PRODUCT

· dossier confidence 70%

Kernel, a company known for its sunflower oil production, faces scrutiny due to its Linux kernel-related products' security vulnerabilities.

Failure events
31
Zero-days
0
RCEs
18
On KEV
31
Critical
2
Worst shame
90
PROFILE
CategoryproductWhat they doKernel is a company that specializes in the production and export of sunflower oil in Ukraine, with a market capitalization of $1.47 billion as of July 23, 2026, and a single billionaire shareholder with a net worth of $1.02 billion.HQCulver City, CASizeunknownOwnershippublic|private|subsidiary Websitehttps://www.wealthrank.in/ ↗
SECURITY POSTURE

The company has a history of security vulnerabilities in its Linux kernel-related products, as evidenced by multiple CVE listings.

Notable failures
  • CVE-2017-1000253
  • CVE-2024-1086
  • CVE-2018-14634
  • CVE-2022-0492
  • CVE-2025-0909
  • CVE-2026-0185
  • CVE-2026-31431
Patterns: repeated unpatched edge-device RCEs
FAILURE HISTORY · 31
DATEEVENTSEVSUMMARY
2022-10-20 CVE-2021-3493 high Linux Kernel unpatched for privilege escalation
2024-09-09 CVE-2017-1000253 critical A local attacker can escalate privileges via a PIE stack buffer corruption vulnerability in the Linux kernel's load_elf_ binary() function.
2024-08-21 CVE-2022-0185 high Linux kernel heap-based buffer overflow in legacy_parse_param allows privilege escalation via unsupported filesystems.
2024-08-07 CVE-2024-36971 high Android kernel RCE vulnerability actively exploited in the wild.
2024-05-30 CVE-2024-1086 critical A use-after-free vulnerability in the Linux kernel's netfilter component allows local privilege escalation and has been actively exploited in the wild.
2022-04-25 CVE-2022-0847 high An unprivileged local user could escalate privileges on Linux systems via the 'Dirty Pipe' improper initialization vulnerability.
2026-08-26 CVE-2022-0995 high A local privilege escalation vulnerability in the Linux kernel was actively exploited in the wild, allowing attackers to gain root access or cause denial of service.
2022-05-23 CVE-2021-1048 high Android kernel use-after-free vulnerability allows privilege escalation and is actively exploited in the wild.
2021-12-10 CVE-2019-13272 high A local privilege escalation flaw in the Linux kernel allowed unprivileged users to gain root access via improper ptrace handling.
2026-08-27 CVE-2026-53362 high A Linux kernel vulnerability allows privilege escalation via the IPv6 networking subsystem, impacting multiple distributions including Suse and Red Hat.
2022-05-23 CVE-2021-0920 high Android kernel race condition allows privilege escalation via use-after-free.
2022-03-03 CVE-2016-5195 high A local privilege escalation vulnerability in the Linux kernel was actively exploited in the wild, allowing attackers to escalate privileges on unpatched systems.
2026-01-26 CVE-2018-14634 high Linux Kernel CVE-2018-14634 exploited for privilege escalation
2025-10-06 CVE-2021-22555 high Linux Kernel Heap Out-of-Bounds Write Vulnerability actively exploited
2025-09-04 CVE-2025-38352 high Linux Kernel TOCTOU race condition actively exploited
2025-06-17 CVE-2023-0386 high Linux Kernel escalation flaw exploited
2025-04-09 CVE-2024-53197 high A recently exploited Linux kernel vulnerability allows attackers with physical access to manipulate memory or execute code via a malicious USB device.
2023-05-12 CVE-2010-3904 high Linux Kernel RDS protocol vulnerability allows local privilege escalation.
2023-05-12 CVE-2014-0196 high Linux Kernel Race Condition Vulnerability allows local users to gain privileges.
2023-03-30 CVE-2023-0266 high Linux Kernel Use-After-Free Vulnerability exploited in wild
2022-09-15 CVE-2013-6282 high Linux Kernel CVE-2013-6282 exposed to active exploitation on ARM v6k/v7, enabling unauthorized memory access and privilege escalation.
2022-09-15 CVE-2013-2596 high Linux Kernel CVE-2013-2596 allowed unauthorized escalation
2022-09-15 CVE-2013-2094 high Linux Kernel CVE-2013-2094 allowed unauthorized escalation
2026-06-02 CVE-2022-0492 high Linux kernel privilege escalation via cgroups v1 release_agent was actively exploited in the wild.
2022-05-25 CVE-2014-3153 high A local privilege escalation flaw in the Linux kernel's futex_requeue function allowed attackers to escalate privileges without remote access.
2022-04-11 CVE-2021-22600 high A local user could exploit a Linux kernel packet socket flaw for denial-of-service or privilege escalation.
2025-04-09 CVE-2024-53150 high A recently exploited Linux kernel vulnerability allows local attackers to read sensitive information via the USB-audio driver.
2025-03-04 CVE-2024-50302 high A Linux kernel vulnerability allows attackers to leak kernel memory via crafted HID reports, and is currently being exploited in the wild.
2025-02-05 CVE-2024-53104 high A recently exploited Linux kernel vulnerability allows for privilege escalation via an out-of-bounds write in the UVC driver.
2026-05-01 CVE-2026-31431 high Linux kernel vulnerability CVE-2026-31431 enables privilege escalation via incorrect resource transfer between spheres.
2024-06-26 CVE-2022-2586 high Linux kernel use-after-free vulnerability in nft_object allows local privilege escalation.
DOSSIER SOURCES
Open questions: How widespread are the vulnerabilities in Kernel's products?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-07-24 03:41:49.222145+00:00